fredrik/logcheck
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Diverse uppdaterade regler

Browse Source
This commit is contained in:
fredrik
2017-03-26 21:22:25 +02:00
parent c287979a0e
commit 9ff928d1d5
3 changed files with 83 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

37
testlog
View File

@@ -426,6 +426,43 @@ Mar 6 22:43:34 nada sshd[4306]: Disconnecting: Packet corrupt [preauth]
Mar 6 23:47:37 nada sm-mta[11119]: v26MlObG011113: Fixed MIME Content-Type header field (possible attack)
Mar 8 03:17:11 nada sshd[23415]: Received disconnect from 91.195.103.166: 11: Client disconnecting normally [preauth]
Mar 7 19:37:07 nada sshd[9647]: Received disconnect from 91.195.103.173: 11: Client disconnecting normally [preauth]
Mar 8 07:31:45 nada sm-mta[16598]: v286VitB016598: AUTH decode64 error [-5 for "Y2FzdG9yAGNhc3RvcgBwb2tlbW9uDQ==\r"], relay=[156.67.106.207]
Mar 9 05:30:02 marconi backup[1895]: Startar backup av marconi
Mar 9 05:42:53 marconi sshd[6125]: fatal: Unable to negotiate with 84.241.42.101 port 61319: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1 [preauth]
Mar 9 09:18:45 marconi backup[12320]: Jobbet avslutat och alla filer flyttade
Mar 9 15:08:55 marconi sshd[25800]: Received disconnect from 61.158.188.21 port 59944:11: ok [preauth]
Mar 9 15:22:40 marconi sshd[29305]: Received disconnect from 202.163.123.135 port 59164:11: ok [preauth]
OA
Mar 17 07:29:31 nada sshd[7692]: Received disconnect from 178.162.211.197: 13: User request [preauth]
Mar 17 11:32:29 nada sm-mta[775]: v2HAWQ2g000768: v2HAWT2f000775: DSN: Host unknown (Name server: hgadvokat.se: host not found)
Mar 17 09:44:38 marconi sshd[27920]: fatal: Unable to negotiate with 212.129.20.230 port 51562: no matching cipher found. Their offer: aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc,none [preauth]
Mar 16 16:34:12 nada sshd[11591]: input_userauth_request: invalid user [preauth]
Mar 16 10:33:41 nada named[31321]: received control channel command 'reload happysthlm.se'
Mar 16 10:33:41 nada named[31321]: zone happysthlm.se/IN: loaded serial 2017031600
Mar 16 10:33:42 nada named[31321]: client 192.3.61.229#33639: transfer of 'happysthlm.se/IN': AXFR-style IXFR started
Mar 16 10:33:42 nada named[31321]: client 192.3.61.229#33639: transfer of 'happysthlm.se/IN': AXFR-style IXFR ended
Mar 16 11:47:51 nada named[31321]: client 46.162.117.83#39505: transfer of 'happysthlm.se/IN': AXFR-style IXFR started
Mar 16 11:47:51 nada named[31321]: client 46.162.117.83#39505: transfer of 'happysthlm.se/IN': AXFR-style IXFR ended
Mar 16 03:41:06 nada sm-mta[28708]: STARTTLS: write error=syscall error (-1), errno=32, get_error=error:00000000:lib(0):func(0):reason(0), retry=99, ssl_err=5
Mar 15 06:24:30 nada sm-mta[29141]: v2F5OSbF029141: AUTH decode64 error [-5 for "Y2FzdG9yAGNhc3RvcgBwb2tlbW9uDQ==\r"], relay=[156.67.106.207]
Mar 15 06:24:51 nada sm-mta[29155]: v2F5OoMX029155: AUTH decode64 error [-5 for "Y2FzdG9yAGNhc3RvcgBwb2tlbW9uDQ==\r"], relay=[156.67.106.207]
Mar 15 06:25:13 nada sm-mta[29160]: v2F5PClb029160: AUTH decode64 error [-5 for "Y2FzdG9yAGNhc3RvcgBwb2tlbW9uDQ==\r"], relay=[156.67.106.207]
Mar 15 06:25:35 nada sm-mta[29590]: v2F5PYa1029590: AUTH decode64 error [-5 for "Y2FzdG9yAGNhc3RvcgBwb2tlbW9uDQ==\r"], relay=[156.67.106.207]
Mar 20 06:54:52 nada sshd[7359]: input_userauth_request: invalid user [preauth]
Mar 20 04:00:44 nada sm-mta[21983]: v2K30iPx021983: [180.163.2.117]: probable open proxy: command=GET / HTTP/1.1\r\n
Mar 19 06:47:45 nada clamav-milter: ClamAV: mi_stop=1
Mar 19 04:36:45 marconi sshd[26598]: error: Received disconnect from 46.165.220.212 port 52999:13: User request [preauth]
Mar 19 00:00:01 marconi sudo: fredrik : TTY=unknown ; PWD=/home/fredrik ; USER=root ; COMMAND=/home/fredrik/bin/kdbx_backup.sh
Mar 25 05:53:41 marconi dhcpcd[2859]: enp4s0: adding route to 192.168.1.0/24
Mar 25 05:53:41 marconi dhcpcd[2859]: if_route (ADD): File exists
Mar 25 05:53:41 marconi dhcpcd[2859]: enp4s0: adding default route via 192.168.1.1
Mar 25 05:53:41 marconi dhcpcd[2859]: enp4s0: removing default route via 192.168.1.1
Mar 25 02:59:08 marconi dhclient[31370]: DHCPREQUEST of 192.168.1.118 on enp4s0 to 192.168.1.1 port 67 (xid=0x3d70f3bb)
Mar 24 13:00:11 marconi kernel: [181133.572625] r8169 0000:04:00.0 enp4s0: link up
Mar 24 01:42:10 nada sshd[31304]: input_userauth_request: invalid user [preauth]
Mar 23 19:07:02 nada sm-mta[20228]: v2NI71CW020228: rejecting commands from ec2-35-165-194-208.us-west-2.compute.amazonaws.com [35.165.194.208] due to pre-greeting traffic after 1 seconds
Mar 23 23:44:38 nada sm-mta[17761]: v2NMibVZ017761: rejecting commands from ecs-160-44-202-130.reverse.open-telekom-cloud.com [160.44.202.130] due to pre-greeting traffic after 1 seconds
Aug 23 18:39:24 nada fredrik[1713]: Kontrollrad. Syns detta har vi problem...
Aug 23 18:39:24 nada fredrik[1713]: Sista raden